$ rpki-client -vvf rpki.apnic.net/member_repository/A915B8D0/41E2BE28EB6E11EE83E3AE51C4F9AE02/JU6vZJB1T1B9uBzpDdtim2IvRmA.mft File: JU6vZJB1T1B9uBzpDdtim2IvRmA.mft (raw, json) Hash identifier: 2KJyHvCX8P6OhInunJVWi2uuv5z+Hsnz90G2T3gblzI= Subject key identifier: 76:30:CF:7F:FF:52:80:67:DF:F4:26:7F:36:D3:0C:5E:9F:E2:8E:9D Authority key identifier: 25:4E:AF:64:90:75:4F:50:7D:B8:1C:E9:0D:DB:62:9B:62:2F:46:60 Certificate issuer: /CN=A915B8D0/serialNumber=254EAF6490754F507DB81CE90DDB629B622F4660 Certificate serial: CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JU6vZJB1T1B9uBzpDdtim2IvRmA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915B8D0/41E2BE28EB6E11EE83E3AE51C4F9AE02/JU6vZJB1T1B9uBzpDdtim2IvRmA.mft Manifest number: C5 Signing time: Sat 05 Apr 2025 05:10:00 +0000 Manifest this update: Sat 05 Apr 2025 05:10:00 +0000 Manifest next update: Sat 12 Apr 2025 05:10:00 +0000 Files and hashes: 1: JU6vZJB1T1B9uBzpDdtim2IvRmA.crl (hash: q81lctF9gmNDuyp/u3KeQUibEoLr59588SifP3pZ4lw=) 2: 0B2E53E422B711EFB2B15160C4F9AE02.roa (hash: QOXN1nndvSK1AATByodPTKJLPtXr2Sr2FzfqtSOzir4=) 3: FD6286EA22B611EFBF5D3960C4F9AE02.roa (hash: OT9nmfEqQIusq5e8dp/kCIgj5rUezQlTB68c6LVcxWs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915B8D0/41E2BE28EB6E11EE83E3AE51C4F9AE02/JU6vZJB1T1B9uBzpDdtim2IvRmA.crl rsync://rpki.apnic.net/member_repository/A915B8D0/41E2BE28EB6E11EE83E3AE51C4F9AE02/JU6vZJB1T1B9uBzpDdtim2IvRmA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JU6vZJB1T1B9uBzpDdtim2IvRmA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 05:09:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 202 (0xca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915B8D0 Validity Not Before: Apr 5 05:10:00 2025 GMT Not After : Apr 12 05:10:00 2025 GMT Subject: CN=67f0bb28-661b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:c1:bf:53:c0:59:11:7d:9f:72:f6:34:a6:2d: de:9f:71:ed:3d:f3:66:46:68:6e:48:39:20:0e:db: e7:da:ab:e9:a7:cf:18:93:66:70:99:73:46:54:7f: 8b:97:b7:a0:32:cf:6a:74:b4:0e:71:b9:19:93:36: 1e:07:09:e1:43:a9:af:f2:f9:18:6a:b5:3d:84:f4: a7:32:ab:f3:cf:90:7b:73:5f:e5:03:55:67:0f:86: 14:be:a8:9c:e9:b9:f7:d0:5a:34:88:b9:f4:bf:b3: 6d:22:20:d0:3c:aa:8b:55:29:18:11:af:d2:f9:da: 17:92:ba:17:d3:64:42:68:aa:e6:f8:07:32:3a:20: 92:d7:ca:0d:01:58:05:de:0c:40:d3:e0:58:54:68: f9:a3:9e:77:06:7e:81:9a:90:89:a2:23:2a:dd:8d: c2:dc:a1:8c:5e:0e:a3:aa:cd:5e:a5:b5:1e:d5:b9: 9f:a7:d3:41:3c:1d:be:2f:5d:5b:4d:4a:2a:b8:32: c1:eb:7e:f6:c1:f2:80:6b:84:f5:26:63:ec:7a:87: 61:0d:18:bc:fd:ad:17:b6:06:fc:45:60:68:61:c4: 31:19:77:0e:64:c8:74:be:57:0c:84:66:ae:32:9e: 98:03:55:2b:37:19:20:97:f9:f1:53:e1:e6:6d:2d: 40:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:30:CF:7F:FF:52:80:67:DF:F4:26:7F:36:D3:0C:5E:9F:E2:8E:9D X509v3 Authority Key Identifier: keyid:25:4E:AF:64:90:75:4F:50:7D:B8:1C:E9:0D:DB:62:9B:62:2F:46:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915B8D0/41E2BE28EB6E11EE83E3AE51C4F9AE02/JU6vZJB1T1B9uBzpDdtim2IvRmA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JU6vZJB1T1B9uBzpDdtim2IvRmA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B8D0/41E2BE28EB6E11EE83E3AE51C4F9AE02/JU6vZJB1T1B9uBzpDdtim2IvRmA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b3:19:28:2c:2c:6d:41:65:28:a6:e6:94:42:8b:90:c4:33:62: ae:69:b4:15:d7:cf:bd:91:0f:bc:81:a0:57:d1:d3:cc:99:b5: b3:06:1c:33:01:ef:54:b8:0b:1f:8d:fb:68:bd:96:c6:d5:19: 19:50:2f:fb:5c:9f:78:b8:42:30:97:fd:69:f0:a0:af:0a:fb: 4a:6f:49:11:9d:cf:7f:ad:0f:a1:25:d8:0b:51:47:48:cd:bd: 10:c5:0b:5e:91:a6:18:7f:9e:35:53:88:41:dd:f5:5b:7d:24: 9c:59:f1:0a:33:7f:36:91:2d:a7:bd:cf:ca:37:8b:e0:07:51: 2b:84:7f:92:ba:86:5c:6c:95:f1:10:cf:76:5e:6b:14:1b:f8: 08:30:b8:d9:e0:de:0a:c7:53:11:d3:d5:89:0e:80:08:da:09: 16:26:c3:80:27:f6:65:e8:88:d6:10:fb:7e:4e:18:50:75:79: b6:79:f0:13:51:c6:3d:34:a0:c2:ed:16:64:a4:da:4f:6d:2c: 61:ae:0d:59:e4:6b:11:8b:c4:f7:91:c2:14:81:3a:fb:95:12: 15:e8:f3:c8:08:a4:61:55:0c:69:3f:90:26:a4:a6:49:04:d0: f2:9d:d8:42:0f:c3:89:4e:cc:96:3d:19:82:e8:1e:1b:f1:6c: 52:af:a2:ac -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUI4RDAxMTAvBgNVBAUTKDI1NEVBRjY0OTA3NTRGNTA3REI4MUNFOTBEREI2MjlC NjIyRjQ2NjAwHhcNMjUwNDA1MDUxMDAwWhcNMjUwNDEyMDUxMDAwWjAYMRYwFAYD VQQDEw02N2YwYmIyOC02NjFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy8G/U8BZEX2fcvY0pi3en3HtPfNmRmhuSDkgDtvn2qvpp88Yk2ZwmXNGVH+L l7egMs9qdLQOcbkZkzYeBwnhQ6mv8vkYarU9hPSnMqvzz5B7c1/lA1VnD4YUvqic 6bn30Fo0iLn0v7NtIiDQPKqLVSkYEa/S+doXkroX02RCaKrm+AcyOiCS18oNAVgF 3gxA0+BYVGj5o553Bn6BmpCJoiMq3Y3C3KGMXg6jqs1epbUe1bmfp9NBPB2+L11b TUoquDLB6372wfKAa4T1JmPseodhDRi8/a0Xtgb8RWBoYcQxGXcOZMh0vlcMhGau Mp6YA1UrNxkgl/nxU+HmbS1ASwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHYwz3// UoBn3/QmfzbTDF6f4o6dMB8GA1UdIwQYMBaAFCVOr2SQdU9Qfbgc6Q3bYptiL0Zg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QjhEMC80MUUyQkUyOEVC NkUxMUVFODNFM0FFNTFDNEY5QUUwMi9KVTZ2WkpCMVQxQjl1QnpwRGR0aW0ySXZS bUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pVNnZaSkIxVDFCOXVCenBEZHRpbTJJdlJtQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QjhEMC80MUUyQkUyOEVCNkUxMUVFODNFM0FFNTFDNEY5QUUwMi9KVTZ2WkpCMVQx Qjl1QnpwRGR0aW0ySXZSbUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCzGSgsLG1BZSim5pRCi5DEM2KuabQV18+9kQ+8gaBX0dPMmbWzBhwz Ae9UuAsfjftovZbG1RkZUC/7XJ94uEIwl/1p8KCvCvtKb0kRnc9/rQ+hJdgLUUdI zb0QxQtekaYYf541U4hB3fVbfSScWfEKM382kS2nvc/KN4vgB1ErhH+SuoZcbJXx EM92XmsUG/gIMLjZ4N4Kx1MR09WJDoAI2gkWJsOAJ/Zl6IjWEPt+ThhQdXm2efAT UcY9NKDC7RZkpNpPbSxhrg1Z5GsRi8T3kcIUgTr7lRIV6PPICKRhVQxpP5AmpKZJ BNDyndhCD8OJTsyWPRmC6B4b8WxSr6Ks -----END CERTIFICATE-----Generated at Sun Apr 6 00:04:25 2025 by rpki-client